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A LOCAL ASSURANCE MANAGEMENT DEVICE FOR AN EQUIPMENT 
ELEMENT IN A COMMUNICATION NETWORK 

5 

The invention concerns communication networks, and 
more particularly those providing an assurance of the 
continuity of service (s) . 

Many communication networks implement assurance 

10 methods which monitor the execution of preventive and 
remedial maintenance activities, intended to assure their 
customers of continuity in the availability of services, 
defined in terms of quality of service (QoS) . To this 
purpose, the networks have a network management system (or 

15 NMS) which continuously analyses the status of means and 
performance so as to anticipate or detect problems or 
breakdowns, and to determine the actions to be undertaken 
so that the customers should not be penalized. 

Such centralized analysis is based upon the collection 

20 of a very large volume of data and alarms from the many 
items of network equipment used to perform the measurement 
of parameter values in the network, and more precisely in 
their management information bases (or MIBs) , used to store 
the management data representing the measured values . Once 

25 collected, via an SNMP collector for example, the data are 
stored in an archive management base of the Oracle type for 
example, and are fed into calculation modules which 
implement predefined formulae or equations. 

Such a solution is described, for example, in the 

30 article entitled "Real-Time Performance Monitoring and 
Anomaly Detection on the Internet: an Adaptive, Objective- 
Driven, Mix -and -Match Approach" by L. Lawrence Ho, 
Christopher J. Macey and Ronald G. Hiller. 

Such a centralized assurance method requires the use 

35 of management bases of very large capacity, substantial 
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calculation time, and consumes passband (during 
collection) , damaging the performance of the network. 

Some attempts have been made toward the use of on- 
board agents in network elements, but the decisional 
5 aspects remain in a centralized member, and present the 
same defects as the previous solution. Moreover, these 
attempts do not concern the assurance issue. 

Examples of such attempts can be found in American 
patents US 6 272 537 and US 6 085 243. 

10 

The object of the invention is therefore to improve 
the situation. 

To this purpose, It proposes a local assurance device 
or arrangement for an equipment element in a communication 

15 network presenting a chosen configuration and including 
means for the measurement of parameter values in the 
network and a management information base (MIB) storing 
management data representing the measured values. 

This device is characterized by the fact that it 

20 includes management means used to adapt the configuration 
of the equipment in which it is installed, with relation 
to, in particular, management data stored in its management 
information base and with chosen rules, known as assurance 
rules, defining a local assurance policy. 

25 In other words, the invention consists of integrating, 

into equipment (or nodes) of the network, an inbuilt 
assurance device so as to be able to provide, locally, at 
least part of the assurance method managed by the NMS . 

The inbuilt assurance device or arrangement, according 

30 to the invention, can include additional characteristics 
which can be taken separately and/or in combination, and in 
particular : 

management means capable of adapting the 
configuration of their equipment with relation to the 
35 information data coming from at least one other network 
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element , 

an adaptation consisting of a change to the 
parameter measurement policy and/or a change to the report 
transmission (or reporting) policy to the NMS, 
5 an adaptation consisting of a change to the 

method of operation of the equipment, 

management means including means for analyses of 
network parameters capable of delivering information data 
representing the evolution in time, over a chosen period, 

10 of certain parameter values in the network (such as the 
traffic or the status of a router, for example) which are 
stored in the MIB. In this case, the means used for the 
analyses can be arranged so as to deliver information data 
representing a trend analysis and/or an analysis of 

15 profiles or of signatures (or "baselines'') and/or an 
analysis of discontinuity and/or an aggregation of network 
parameter values. In addition, these analysis means can be 
configurable, in particular with the aim of implementing 
fresh calculations with relation to the network parameters, 

20 transmitted by the NMS, 

management means including alarm means 
responsible for triggering the sending of an alarm and/or 
of information data to the NMS and/or to at least one other 
network element, in accordance with chosen assurance rules. 

25 Such information data and alarms are, for example, 
representative of the result (s) of analyses (s) or of data 
aggregation (s) effected by the analysis means and/or the 
value (s) of parameters of the network stored in the MIB. In 
addition, the alarm means can be configurable, 

30 - management means wherein network observation 

means defining a flow measurement agent of the end-to-end 
type, and delivering information data. In this case, the 
means employed for observation of the network can be 
configurable , 

3 5 - management means including means for the 
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management of service level agreements (SLA) delivering 
information data. In this case, the means for the 
management of service level agreements (SLA) can be 
configurable , 

5 - management means capable of performing tests of 

the active measurement type, or for assistance with 
troubleshooting for example. In particular, these tests can 
be used to feed back aggregated information or the result 
of the test (such as the time taken for an operation of the 

10 TCP type) at the level of the NMS layer, 

management means capable of guaranteeing their 
management tasks in accordance with a timetable, so that 
certain (or all) assurance or test functions are performed 
only on certain days of the week or of the month, or at 

15 certain times for example, 

management means including monitoring means, used 
to manage the operation (and in particular the 
configuration) of the analysis means, alarm means, network 
observation means , and means for the management of service 

20 level agreements (SLA) , in accordance with chosen assurance 
rules and the information data delivered by them. Such 
monitoring means can have the shape of a rule engine in 
which the chosen assurance rules are stored. In addition, 
these monitoring means can be configurable, 

25 - configurable management means, 

management means and/or analysis means and/or 
alarm means and/or monitoring means and/or network 
observation means and/or means for the management of 
service level agreements (SLA) arranged so as to be capable 

30 of being configured by the NMS via an application 
programming interface (API) and possibly via the MIB. In 
this case, the MIB can be configured or programmed by the 
NMS via the API, 

management means and/or analysis means and/or 

35 alarm means and/or network observation means and/or means 
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for the management of service level agreements (SLA) and/or 
monitoring means arranged so as to be capable of being 
configured by the NMS through dedicated commands such as 
those using the "Command Line Interface" (or CLI) . 
5 The invention also concerns a network element equipped 

with a device or arrangement of the type presented above . 
The invention is more particularly suited, though not in 
any restrictive way, to network equipment such as routers, 
switches and firewalls. 

10 The invention also provides a communication network 

equipped with a network management system (NMS) and a large 
variety of network equipment of the type presented above. 
In one embodiment of the distributed type, each network 
element can be arranged so as to deliver alarms and/or 

is information data of different types to the network 
management sy s t em . 

In particular, the invention can be implemented in all 
network technologies which have to be managed, and in 
particular in networks (of the WDM, SONET, or SDH type for 

20 example) used for the transmission of data (of the 
Internet-IP or ATM type for example) or of speech (of the 
conventional, mobile or NGN type for example) . 

Other characteristics and advantages of the invention 
will appear on examination of the detailed description 

25 hereafter, and of the appended drawings, in which: 

figure 1 schematically shows a communication 
network which includes a network management system (NMS) 
and network equipment according to the invention, and 

figure 2 schematically shows an example of 

30 implementation of a network element according to the 
invention. 

The appended drawings can not only serve to complete 
the invention, but also contribute to its specification or 
description, as appropriate. 
35 The purpose of the invention is to enable the local 
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management, by means of the network equipment, of part of 
the assurance method operated by the network management 
system (NMS) of a communication network. 

As shown on figure 1, a communication network (N) 
5 schematically includes a large variety of network equipment 
(wei - where here i = 1 or 2, but it can take any value), 
such as, for example, servers equipped with a firewall, 
switches, edge routers or core routers, capable of 
exchanging data, in accordance with a network management 
10 protocol, with a network management system, and in 
particular with its network management server (NMS) . 

Each equipment element (wei) conventionally includes a 
management information base (MIB) , also called an object 
instance base. Each MIB stores management data representing 
15 the values of information fields which characterize the 
associated equipment element (WEi) . Certain of these 
information fields designate network parameters whose 
instantaneous values are measured by probes (MM) installed 
in, or controlled by, the equipment element (WEi) . In 
20 addition, each MIB is associated with a management 
information base specification (not shown) , also called an 
MIB specification, stored in the network management system 
and accessible to the network management server (NMS) . 

In what follows, it is considered, by way of a non- 
25 limited example, that the communication network (N) is of 
the Internet type (IP) and that the management protocol of 
the network is the Simple Network Management Protocol (SNMP 
- RFC 2571-2580) . Of course, the invention also applies to 
other types of network, such as, for example, transmission 
30 networks of the WDM, SONET or SDH type, management networks 
of the ATM type, or speech networks of the conventional, 
mobile or NGN type, and to other network management 
protocols, such as TL1, CORBA or CMISE/CMIP, for example. 

In addition, in what follows, it is considered that 
35 the network equipment elements (NEi) are edge (peripheral) 
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routers acting as agents for observation of streams or 
flows of the end-to-end type. These routers are generally 
placed at the borders of the network and allow the 
establishment of links with other networks. These agents 
5 are generally intended to perform end-to-end measurements 
for scalability problems. But of course the invention is 
not limited to this type of network element, the inventions 
concerns all network equipment capable of exchanging 
management data with the NMS, and in particular the edge 

10 routers which do not act as observers, the core routers, 
the switches and the firewalls. 

Each network element (NEi) is generally configured 
specifically so as to transmit to the NMS (or NMS layer) 
information data representing measurements which it has 

15 performed with its probe or probes (MM) and which it has 
stored in its MIB, as well as alarms signaling problems or 
breakdowns. The configuration is generally defined by one 
or more policies. As an example, a first policy relates to 
the reporting conditions for values measured by the 

20 equipment element (NEi) by means of its probes (MM) . A 
second policy can concern the parameter measurements which 
the equipment element (NEi) must perform with its probe or 
probes (MM) . A third policy can concern the method of 
operation of the equipment element (NEi) . These policies 

25 are usually specified for each equipment element (NEi) 
using a configuration module (MC) of the NMS. They are 
transmitted to . the equipment elements (Nei) , via the 
network (N) , by means of the management protocol (here the 
SNMP) . 

30 However, the NMS, and in particular its collector 

module (connector) (MCC) , can also, when considered 
necessary, send requests to a network element (NEi) that it 
should transmits the values of some of the information 
fields which are stored in its MIB. This is known by the 

35 skilled in the art as "polling 11 . 
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As shown more clearly on figure 2, the invention 
provides a local assurance management device (D) which is 
intended to be either installed in an equipment element 
(NEi) or incorporated into an external unit connected 
5 directly to an equipment element (NEi) . In what follows, it 
is considered that the device or arrangement (D) is 
installed in an equipment element (NEi) . 

This device (D) according to the invention includes a 
local assurance management module (MAE) which is 

10 responsible for adapting the configuration of the equipment 
element (NEi) in which it is installed, in accordance with 
chosen rules known as assurance rules, the management data 
stored in its MIB, and any information data which it 
receives from other network equipment. 

15 By "adapting" is meant here the modification of a 

parameter measurement policy (or even the introduction of a 
new measurement policy or re-configuration of the 
measurement policy) and/or a reporting policy to the NMS 
and/or the method of operation of the equipment element 

20 (NEi) , initially specified by the configuration module (MC) 
of the NMS. 

In addition, "assurance rules" here refer to rules 
which specify the local assurance policy of the equipment 
element, taking account of the values calculated by certain 
25 network parameters and stored in its MIB, or of external 
events, such as an action of the NMS layer or of another 
router. 

The installed assurance module (MAE) thus allows the 
installation in an equipment element (NEi) of certain 
30 assurance functions so as to make them "more clever", to 
limit the volume of information which is passing through 
the network, and possibly to allow its partial 
reconfiguration in accordance with assurance rules. 

In order to manage the assurance policy locally, the 
35 assurance module (MAE) preferably includes a first 
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submodule (SMI) which is responsible for applying one or 
more processings to the values of certain information 
fields stored in the MIB. More precisely, these processes 
consist of applying formulae or equations, specified by the 
5 configuration module (MC) of the NMS, to the values of the 
chosen information fields, in accordance with dedicated 
assurance rules, in order to deliver information data. 

For example, the first submodule (SMI) is responsible 
for performing trend analyses over a chosen interval (or 

10 following a predetermined timetable) , which are useful in 
the anticipation of problems or breakdowns. In particular, 
it can point out that the percentage of use of a router CPU 
will reach a critical threshold in an hour, or that the 
passband of an LSP will exceed the selected threshold in 

15 two hours . 

It can be also responsible for performing analyses of 
profiles or of signatures (or "baselines") . This is 
particularly useful, for example, when one is seeking to 
recognize or identify a characteristic usage profile, such 

20 as a specific attack on a router, or a billing method . 

It can also be responsible for performing analyses of 
flow or traffic discontinuity. For example, in the event of 
overloading of a network, packets are dropped, so that the 
detection of a discontinuity in the drop parameter (from 0 

25 to x) enables it to tell that one does indeed have dropped 
packets . 

It can also be responsible for performing aggregations 
of network parameter values, to apply formulae of the data 
collection module (MCC) in the router for example, or for 

30 calculating an average value over a predetermined period 
(e.g. the average passband used during the last week) . In 
this case, the aggregated values can be stored in the MIB, 
and can then be extracted from it as a result of a polling 
request issued by the collector (MCC) of the NMS. 

35 As an illustrative example, the first submodule (SMI) 
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can be responsible for estimating the forecast change (the 
trend) in the number of dropped packets, as well as the 
trend regarding the passband used and/or of the computing 
load (on the CPU) of the equipment element (NEi) . It can 
5 also be arranged to perform tests, on active measurement (s) 
for example, or on troubleshooting assistance. In 
particular, these tests can be used to feed back aggregated 
information or the result of the test (the time taken for 
an operation of the TCP type, for example) at the level of 

10 the NMS layer. 

Preferably the first submodule (SMI) delivers 
information data representing the result of its analyses 
(or assesments) to a (fifth) management submodule (SM5) , 
which determines the actions to be undertaken in accordance 

15 with the local assurance policy of its equipment element 
(NEi) . 

The assurance module (MAE) also preferably includes a 
second submodule (SM2) which is responsible for triggering 
the sending of alarms and/or information data (or reports) 

20 on the orders of the fifth submodule (SM5) , in accordance 
with assurance rules which are dedicated to it . 

But one can also envisage that the first submodule 
(SMI) supplies the second submodule (SM2) with information 
data, so that it can apply certain of the assurance rules 

25 to the latter, and decide either to transmit them, or to 
send an alarm to the NMS and, more precisely, to an event 
reception module (MRE) and/or at least one other network 
element . 

In the illustrated example of an edge router of the 
30 end-to-end type, the assurance module (MAE) also preferably 
includes a third submodule (SM3) which is responsible for 
observing the network, and in particular the traffic of the 
end-to-end type, in accordance with assurance rules which 
are dedicated to it. For example, there is an installed 
35 probe, for performing the end-to-end measurements. This 
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installed probe is then configured so as to determine the 
flow to be examined, and the results of the measurements 
feed into dedicated assurance rules. For example, one of 
these rules can be : "if one measures two different streams 
5 between two edge routers, then one aggregates the 
measurement of the two streams in order to limit the 
calculation" . 

In this case, the third submodule (SM3) defines what 
the skilled in the art refers to as an end-to-end flow 

10 measurement agent. 

Preferably, the third submodule (SM3) delivers 
information data representing the results of its 
observations (or measurements) to the fifth management 
submodule (SM5) , which determines the actions to be 

15 undertaken in accordance with the local assurance policy of 
its equipment element (NEi) . However, one could also 
envisage that the third submodule (SM3) supplies the second 
submodule (SM2) with information data, in order that it can 
apply certain of the assurance rules to the latter, and 

20 decides either to transmit them or to send an alarm to the 
NMS, and more precisely to the event reception module (MRE) 
and/or at least one other network element . 

In addition, and as illustrated in figure 2, the 
assurance module (MAE) can include a fourth submodule (SM4) 

25 which is responsible for local management of certain 
service level agreements (SLA) in accordance with assurance 
rules which are dedicated to it. For example, the submodule 
(SM4) knows the service level agreement (SLA) of a 
customer, so that it can be responsible for checking 

30 whether this SLA is correctly observed, and. can generate an 
alarm (or information data) if this is not the case (or if 
the situation deteriorates) . 

Preferably, the fourth submodule (SM4) delivers 
information data representing management reports to the 

35 fifth submodule (SM5) , which determines the actions to be 
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undertaken in accordance with the local assurance policy of 
its equipment element (NEi) . However one can also envisage 
that the fourth submodule (SM4) supplies the second 
submodule (SM2) with information data, so that it can apply 
5 certain of the assurance rules to these, and decide to 
transmit them or to send an alarm to the NMS, and more 
precisely to the event reception module (MRE) and/or at 
least one other network element . 

As indicated several times above, the assurance module 

10 (MAE) includes a fifth submodule (SM5 or monitoring module) 

which is responsible for monitoring the operation of the 
other submodules (here SMI to SM4) . More preferably, this 
fifth submodule (SM5) should take the form of a rule engine 
in which all the assurance rules devoted to the other 

15 submodules are stored. This could be a "Java expert System 
Shell" , for example. 

While each submodule (SMI to SM4) performs 
calculations and/or analyses and/or compiles reports 
determined on the basis of dedicated assurance rules, the 

20 fifth submodule (SM5) preferably manages all of said 
dedicated assurance rules. By "manages all of the rules" is 
meant here managing the conditions and the actions 
specified by the different rules. 

More precisely, the fifth submodule (SM5) has two main 

25 functions. 

A first function consists of telling the second 
submodule (SM2) to generate an alarm, or to send a report 
to the NMS layer (or to another equipment element in the 
network) , because by applying an assurance rule to data 

3 0 delivered by one of the other submodules (SMI to SM4) , it 
is able to see that the corresponding condition has not 
been satisfied. 

For example, it orders the generation of an alarm 
because the analysis data delivered by the first submodule 

35 (SMI) do not satisfy the condition which is placed upon 
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them by the local assurance policy, or because the fourth 
submodule (SM4) has warned it that an SLA which it was 
operating locally had not been respected. 

A second function consists of deciding on adaptation 
5 of the configuration of the equipment element (NEi) , and in 
particular of the installed assurance module (MAE) , in 
accordance with information data that it receives from the 
other submodules (SMI to SM4) and with the assurance rules 
which determine the local assurance policy. 

10 For example, taking account of the results of 

analyzing certain network parameters, supplied by the first 
submodule (SMI) , the fifth submodule (SM5) can decide to 
modify its method of analysis or indeed to ask the second 
submodule (SM2) to send an alarm to the NMS layer so that 

15 it sends new analysis formulae. It can also decide to 
modify an analysis timetable effected by the first 
submodule (SMI), for example. 

When the fifth submodule (SM5) decides to modify the 
operation (or the configuration) of one of the submodules 

20 (SMI to SM4) , it sends it the corresponding instructions, 

which corresponds to asking the SMS to modify its 
calculations and/or analyses and/or reports. Similarly, 
when the local policy allows it, the fifth submodule (SM5) 
can be responsible for retroactively altering the 

25 configuration of the router via an installed 
reconfiguration module. 

It is worth noting that the reconfiguration operations 
(operational changes) determined by the fifth submodule 
(SM5) are specified by the assurance rules of the local 

30 policy. In other words, all the fifth submodule (SM5) does 
is to order the execution of predefined actions. 

The fifth submodule (SM5) can also apply chosen 
assurance rules to information data coming from other 
network equipment (Ne j ) . Indeed, an equipment element (Ne j ) 

35 can be responsible for transmitting values that it has 
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measured and/or aggregated to another equipment element 
(NEi) equipped with a device or arrangement (D) responsible 
for processing these values so as to generate new 
information data which can then be fed back to the NMS or 
sent to another equipment element (NEj ) . 

The local assurance policy can be defined as follows, 
for example: 

if • the trend, estimated by the first submodule 
(SMI) , of the number of dropped packets increases by more 
than 5%, then a trend alarm must be emitted, 

if the passband used, analyzed by the first 
submodule (SMI) , remains below a first threshold, then the 
value of the passband used must be transmitted each day to 
the collector (MCC) of the NMS, 

if the passband used, analyzed by the first 
submodule (SMI) , falls between a first and second 
threshold, then the average value of the passband used must 
be transmitted every hour to the collector (MCC) of the 
NMS, 

if the time period, estimated by the first 
submodule (SMI) , required for the passband used to reach 
the second threshold is less than two hours, then a trend 
alarm must be emitted, 

if the computing load (on the CPU) of the 
equipment element (NEi) , estimated by the first submodule 
(SMI) , is greater than 80%, then trend analyses need no 
longer be performed, 

if the loss of packets, estimated by the first 
submodule (SMI) , increases by 5%, then the size of the 
buffer memories must be increased by 5%. 

In other words, the local assurance policy consists 
here, on one hand of transmitting the measurement of the 
passband each day if the behavior of the equipment element 
(NEi) is normal, but of activating trend analyses and 
increasing the frequency of report transmission if the 



15 



behavior changes, and on the other hand of interrupting all 
the tasks involving a parameter if the value of this 
parameter becomes critical, and finally of modifying the 
internal operation of the equipment element (NEi) , 
s represented by a parameter, in accordance with any 
variation of said parameter. 

It is preferable that the assurance module (MAE) 
should be configurable remotely over the network (N) by the 
configuration module (MC) of the NMS . More precisely, it is 

10 preferable that each submodule (SMI to SM5) should be 
configurable. In fact this allows the operation of each 
submodule (SM) to be adapted remotely in accordance with 
circumstances, such as due to migration of the network (N) , 
and/or in accordance with requirements, such as when the 

15 centralized assurance controller of the NMS needs to have 
the values of new parameters, or needs additional 
aggregated parameters or new actual or prospective analyses 
(transmission of new formulae or equations) . 

Two embodiments can be envisaged. A first method 

20 consists of transmitting the configuration data indirectly 
to the assurance module (MAE) via an application 
programming interface (API) installed in the equipment 
element (NEi) , and possibly also via the MIB. This API 
interface can also, with advantage, allow the configuration 

25 module (MC) of the NMS to configure or program the MIB, so 
that it is not of the static type. In fact the assurance 
module (MAE) can cooperate with the MIB in order to 
configure itself, and to define new entries to the MIB, in 
order to be able to access these news entries. In this 

30 case, access is gained to the MIB via SNMP requests ( "GET" 
and "SET" ) , thus allowing easy configuration (and even 
management of the rights and the security of the exchanges 
with SNMP 3) ; the MIB allows one to have a "normalized" 
interface due to the fact that its fields are accessible 

35 via well-defined object identifiers (OID) . An object 
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identifier refers here to an identifier that is the subject 
of an MIB variable that one wishes to retrieve. Such an 
identifier is generally normalized by the RFC 1213 standard 
for MIB II for example. 
5 A second method consists of transmitting the 

configuration data directly to the assurance module (MAE) 
using dedicated commands, such as those from the "Command 
Line Interface'' (or CLI) . 

The assurance module (MAE) can be created in the form 

10 of electronic circuits, of software (computer) modules, or 
a combination of circuits and software. 

The invention is not limited to the embodiments of the 
local assurance management device and of the network 
element described above by way of example only, but also 

is encompasses all of the alternativres which might be 
envisaged by the professional engineer in the context of 
the following claims. 

Thus in the above document, we have described network 
equipment which is capable of locally managing the 

20 assurance process supervised by the NMS . However one can 
also envisage a distributed operation in which some at 
least of the network equipment is equipped with simplified 
local assurance management, enabling the transmission of 
alarms and/or specific and additional information data to 

25 an assurance server of the NMS. In this case of course, the 
network equipment remains capable of adapting its 
configuration in accordance with management data values 
stored in its MIBs. 

In addition, we have described one embodiment in which 

30 the device or arrangement according to the invention was 
installed or located in the network element. However the 
device or arrangement according to the invention can also 
take the form of an external element installed in a unit 
connected directly to the network element. 



